Cyber GCCs ramping up workforce in India

Global enterprises are increasing their India footprint with over 25% of their cyber capability centres (GCCs) now hosting 50% of their global cybersecurity workforce in India, even as 22% operate large cyber teams of more than 100 professionals.

The findings are part of the report titled, Secure in India 2026: Cyber GCCs* in the Age of AI, released today at the Data Security Council of India’s (DSCI’s) Cyber for Global Summit 2026. Cyber GCC refers to teams focused on global cybersecurity delivery, located within respective GCCs in India. Cyber GCC was coined in 2018 in the first edition of Secure in India.

The report authored by KPMG states that cybersecurity-focused GCCs in India are playing an increasingly strategic role in helping global enterprises strengthen cyber resilience, accelerate secure AI adoption, drive innovation, and manage emerging cybersecurity and digital risks.

According to the report, 51% of global organisations have global cybersecurity teams reporting into India-based cyber GCC leadership, while 80% of cyber GCCs have representation in global cybersecurity committees, reflecting their growing strategic influence.

The report highlights that a significant number of cyber GCCs now operate dedicated cybersecurity R&D labs with cybersecurity operations, risk assessments, engineering and automation are emerging as priority domains for innovation. Increasing demand for specialised cybersecurity expertise, autonomous security operations and AI-led innovation are expected to shape the future of Cyber GCCs over the next three to five years, adds the report.

Srinivas Potharaju, Partner and Head, Cyber Security & Technology, KPMG in India, mentions, "In an environment marked by technological disruption, evolving cyber threats and rapid AI adoption, Cyber GCCs in India have evolved into trusted partners for cybersecurity and digital risk management."

In fact, artificial intelligence (AI) has emerged as a force multiplier for cyber GCCs, delivering greater operational efficiency and improved risk and threat management. Key AI-enabled cybersecurity use cases include automation of various security tasks, third party cyber risk management, enhanced threat modelling, improved SOC alert triage, and faster analysis of cyber threats. “Data security and privacy concerns, governance and compliance risks, and model vulnerabilities rank among the top AI security challenges,” states the report.

“They [cyber GCCs] are increasingly leading innovation, strengthening resilience and enabling global organisations to navigate complexity with confidence. As their role continues to expand, Cyber GCCs are poised to play a defining role in shaping the future of secure and resilient global organisations,” says Potharaju.

Not surprising that demand is rising sharply for skills in cyber resilience, governance, cloud security, risk assessments, and cybersecurity architecture. However, the report mentions that cybersecurity workforce stability has improved, with nearly half of cyber GCCs reporting attrition below 7%.